CVE-2008-4151
Directory traversal vulnerability in collect.php in CYASK 3.x allows remote attackers to read arbitrary files via a .. (dot dot) in the neturl parameter.
Date published : 2008-09-19
http://www.securityfocus.com/bid/31237
http://www.securityfocus.com/archive/1/496511/100/0/threaded